Add CVE-2016-4476 patch for avoiding \n and \r characters in passphrase
parameters, which allows remote attackers to cause a denial of service
(daemon outage) via a crafted WPS operation.
patches came from http://w1.fi/security/2016-1/
Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Add '--disable-libunwind' to make it work on aarch64. This would avoid
system hanging when using libtcmalloc.so.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Add libdbd-mysql-perl to RDEPENDS as mysql_setpermission
depends on DBD::mysql module
root@test:~# mysql_setpermission -h
Option h is ambiguous (help, host)
Password for user to connect to MySQL:
install_driver(mysql) failed: Can't locate DBD/mysql.pm
in @INC (you may need to install the DBD::mysql module)
(@INC contains: /etc/perl /usr/lib64/perl/site_perl/5.22.1/
/usr/lib64/perl/site_perl/5.22.1
/usr/lib64/perl/vendor_perl/5.22.1/
/usr/lib64/perl/vendor_perl/5.22.1
/usr/lib64/perl/5.22.1/ /usr/lib64/perl/5.22.1
/usr/local/lib/site_perl /usr/lib64/perl/5.22.1 .)
at (eval 11) line 3, <STDIN> line 1.
Perhaps the DBD::mysql perl module hasn't been fully installed,
or perhaps the capitalisation of 'mysql' isn't right.
Available drivers: DBM, ExampleP, File, Gofer, Proxy, Sponge.
at /usr/bin/mysql_setpermission line 90.
* Add libmysqlclient to Provides as libdbd-mysql-perl depend on it
Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The commands(mysql_convert_table_format and mysql_setpermission) need
the supported API provided by the libdbi-perl package.
So add the libdbi-perl to the variable RDEPENDS of mariabdb-server.
Move libdbi-perl from meta-perl to meta-oe
Signed-off-by: Zhixiong Chi <Zhixiong.Chi@windriver.com>
Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Add new recipe libdbd-mysql-perl as mariadb-server
rdepends on it
Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Remove the reference of S from .la and DEBUG_PREFIX_MAP
from .pc file to avoid QA issues.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Mozjs is mozillaware, meaning that it barely works on x86 and is plain broken on everything else. This time mozjs assumes that noone will ever have more than 47bit for VA, breaking aarch64 which can have more. Thanks to polkit developers using mozjs systemd will crash early during boot when using polkit.
Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
| config.status: executing libtool commands
| mv: cannot move ‘<WORKDIR>/build’ to ‘<WORKDIR>/build-fftw/build’: Directory not empty
| WARNING: <WORKDIR>/temp/run.do_configure.21632:1 exit 1 from 'mv <WORKDIR>/build <WORKDIR>/build-fftw'
| ERROR: Function failed: do_configure (log file is located at <WORKDIR>/temp/log.do_configure.21632)
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* fix CVEs CVE-2014-3634, CVE-2014-3683
* rebase the patch use-pkgconfig-to-check-libgcrypt.patch
* backport fixes for build error:
lexer.l:34:14: error: expected identifier or '(' before '__extension__'
* replace the old configure option '--enable-cached-man-pages' with
'--disable-generate-man-pages'
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
This avoids a "QA Issue: No GNU_HASH in the elf binary:".
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* avoids conflicts installing same files into sysroot
* for packages requiring a specific version of fftw: simply add fftw to DEPENDS
* no need for some distro decision - recipes depndong on fftw take what they
need
* each executable is packed into an own package to avoid dragging in all
libraries
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* put neccessary sources together
* add PACKAGECONFIGs for alsa and portaudio
* remove magic and unknown EXTRA_OEMAKE - have no idea what it was for
* remove TWL4030 specific patch - this is somthing a bsp layer should do
* replace patch for checking if already installed by config --enable-force-install
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
PortAudio has moved from Subversion to Git, so the SRC_URI needs to be updated.
They also have stable tarballs so instead of taking a random git hash use the
latest release. This was svn revision 1919 so to keep the version order correct
hard-code this into the PV.
The license is in fact MIT, so use that in LICENSE instead of PortAudio (which
wasn't defined anywhere, resulting in QA warnings).
Add a patch to pass LDFLAGS to all the compiles.
Remove the useless assignment to TESTS. Install the test suite manually using
libtool so that we don't install the wrapper scripts.
Explicitly disable ASIHPI to avoid floating dependencies.
Remove redundant commented-out lines.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* otherwise jack is autodetected:
mpv-0.15.0: mpv rdepends on libjack, but it isn't a build dependency, missing jack in DEPENDS or PACKAGECONFIG? [build-deps]
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* autodetected as reported in bitbake world status e-mails:
libgit2-0.24.1: libgit2 rdepends on libssh2, but it isn't a build dependency, missing libssh2 in DEPENDS or PACKAGECONFIG? [build-deps]
* log.do_package:
DEBUG: libgit2: Dependency libssh2.so.1 requires package libssh2 (used by files: /OE/build/oe-core/tmp-glibc/work/i586-oe-linux/libgit2/0.24.1-r0/packages-split/libgit2/usr/lib/libgit2.so.0.24.0)
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* autodetected for smsd as reported in bitbake world status e-mails:
gammu-1.32.0: libgsmsd rdepends on unixodbc, but it isn't a build dependency, missing unixodbc in DEPENDS or PACKAGECONFIG? [build-deps]
* log.do_package:
DEBUG: libgsmsd: Dependency libodbc.so.2 requires package unixodbc (used by files: /OE/build/oe-core/tmp-glibc/work/i586-oe-linux/gammu/1.32.0-r0/packages-split/libgsmsd/usr/lib/libgsmsd.so.7.1.32.0)
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* fixed 3 autodetected dependencies:
WARN: jasper: jasper-bin rdepends on freeglut, but it isn't a build dependency?
WARN: jasper: jasper-bin rdepends on libgl-mesa, but it isn't a build dependency?
WARN: jasper: jasper-bin rdepends on libglu, but it isn't a build dependency?
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
the patch comes from:
https://bugzilla.redhat.com/show_bug.cgi?id=1238322https://bugzilla.redhat.com/attachment.cgi?id=1055640
The nss_parse_ciphers function in libraries/libldap/tls_m.c in
OpenLDAP does not properly parse OpenSSL-style multi-keyword mode
cipher strings, which might cause a weaker than intended cipher to
be used and allow remote attackers to have unspecified impact via
unknown vectors.
Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Put binary "/usr/bin/nm-online" into main package
as the systemd service "NetworkManager-wait-online.service"
is provided by main package and it needs to run
"/usr/bin/nm-online"
* Correct "NetworkManager-wait-online.service.in"
to avoid dependency circle and get right service status
Signed-off-by: Haiqing Bai <Haiqing.Bai@windriver.com>
Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Remove various patches no longer referenced by SRC_URI.
Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
1) Upgrade xterm from 320 to 325.
2) Modify LIC_FILES_CHKSUM, since the date in it has been changed, But the LICENSE has not been changed.
Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Also drop redundant and now unusable patch.
Signed-off-by: Zeeshan Ali <zeeshan.ali@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* fix CVEs: CVE-2015-8629, CVE-2015-8630, CVE-2015-8631
* update LIC_FILES_CHKSUM, only Copyright changed in NOTICE file:
-Copyright (C) 1985-2015 by the Massachusetts Institute of Technology.
+Copyright (C) 1985-2016 by the Massachusetts Institute of Technology.
* remove useless functions: krb5_do_unpack(), do_unpack()
* remove patches that included by new release:
- 0001-Work-around-uninitialized-warning-in-cc_kcm.c.patch
- Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
- Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
- Fix-build_principal-memory-bug-CVE-2015-2697.patch
- Fix-IAKERB-context-export-import-CVE-2015-2698.patch
- krb5-CVE-2016-3119.patch
- krb5-CVE-2016-3120.patch
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
1) Upgrade ttf-dejavu from 2.35 to 2.37.
2) Modify LIC_FILES_CHKSUM, since the date in it has been changed, But the LICENSE has not been changed.
Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
thrift build issues on gcc-6 were essentially 2 issues:
- gcc-6 has stricter overflow checking on array declaration, and
thrift was using `char` when it should have used `signed char`
- gcc-6 is really picky about it's include paths (`-I`), and thrift
had a bad habbit of passing internal ones when it was cross compiled
due to how it was using `include_directories()`
This adds 2 patches (both variations of those submitted upstream, the
ones included here are rebased onto thrift-0.9.3).
https://issues.apache.org/jira/browse/THRIFT-3831https://issues.apache.org/jira/browse/THRIFT-3828
Signed-off-by: Cody P Schafer <dev@codyps.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* The python LICENSE_DEFAULT snippet was stolen at [1]
* disable plugins not builing due to missing- or not properly detected
dependencies
[1] d85285792f
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Add support for the acl DISTRO_FEATURE using PACKAGECONFIG
Inherit pkgconfig since zile-2.4.11 uses that to find bdwgc (aka libgc).
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
since commit fa436aeb3242cbfdbbe16d448d45bce8eb5b74fd in OE core, we are seeing
GNU_HASH QA failure when building gpsd. Since this commit we default to setting
the wrong linker hash style to detect such errors in recipes.
gpsd is using scons which does not take LDFLAGS into account, and LDFLAGS need
to be passed from the environment, using LINKFLAGS variable.
Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Android tools offer filsystem tools for creating sparse images,
so package them in package of its own.
This recipe is re-worked and not a straight import from meta-shr.
It's built from AOSP source. I've dropped the ubuntu-ism which will
never be upstreamed.
The intent is to be closer to the upstream AOSP source code and be able
to update the recipe regularly.
Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Heap-based buffer overflow in the parse_packet function in network.c in
collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to
cause a denial of service (daemon crash) or possibly execute arbitrary
code via a crafted network packet.
Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
